GasPot originally released at Blackhat 2015 - Updated for the same stuff 2026
Repository Index
47,133 repositories indexed
745–768 of 1,115 · Most stars
Library to generate TOTP/HOTP codes
A Python library and command line tools to provide interactive log visualization.
- cybersecurity
- investigation
- malware-analysis
- malware-research
ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits
unXOR will search a XORed file and try to guess the key using known-plaintext attacks.
Minimal, consistent Python API for building integrations with malware sandboxes.
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
A debugger frontend
NeuraVision — AI content generation platform (PHP backend engine: auth, credits, generation, analytics)
- ab-testing
- ai-platform
- analytics
- backend-api
Let's be scanned. A low-interaction honeypot focused on network scanners and bots. It integrates very well with IVRE to build a self-hosted alternative to GreyNoise.
- networking
- udp
- ipv6
- ipv4
Incident Response Triage - Windows Evidence Collection for Forensic Analysis
Sym is a command line utility and a Ruby API that makes it trivial to encrypt and decrypt sensitive data. Unlike many other existing encryption tools, sym focuses on usability and streamlined interface (CLI), with the goal of making encryption easy and transparent. The result? There is no excuse for keeping your application secrets unencrypted :)
The pattern matching swiss knife
Content discovery and fuzzing with HTTP/3 support (100k requests per second)
Spam Honeypot with Intelligent Virtual Analyzer
The VBCorLib framework brings many of the powerful .NET classes to VB6.
- collections
- hashing
- biginteger
- encoding
RSA public/private key encryption, private key signing and public key verification in Swift using the Swift Package Manager. Works on iOS, macOS, and Linux (work in progress).
- swift
- rsa-cryptography
- rsa-signature
- macos
Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design
- exploit
- php
- php2shell
- php2shell-cve
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
Detect hidden files and text in images
- steganography
- ctf
- stego
- capture-the-flag
The fastest 128-bit and 256-bit hash, passes all tests, and under 140 source lines of code. API library and CLI tool in C++ and NodeJS/Wasm
- call-for-papers
- cryptanalysis
- cryptanalysis-tasks
- cryptography
OmniAuth Oauth2 strategy for weibo.com.
The agentic pentesting environment that lives on your machine. AI agent teams, visual workflows and your own tools, 100% local.
- ai-agents
- bug-bounty
- electron
- offensive-security
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php